TLS 1.x transport protocol and GroupWise Mobility Server 2.1.

  • 7016959
  • 02-Nov-2015
  • 11-Feb-2016

Environment

Novell GroupWise Mobility Service

Situation

With recent SP4 for SLES11 and SLES12 there is a support for TLS 1.x. Can we get our GMS 2.1 server working with this protocol ?

Resolution

GMS strongly depends upon python. With SLES11 it is version 2.6.9 and that is compiled / uses only shipping version of openSSL (0.9.8). The openSSL version 0.9.8 does not support neither TLS 1.1 nor 1.2:

https://www.suse.com/communities/conversations/tls-1-2/

Therefore GMS 2.1 cannot support TLS 1.1 nor 1.2.
Even if you would get higher version of openSSL on SLES11 server manually via channel update, the python from SLES11 would not still use such updated version as it was compiled only with shipping version openSSL 0.9.8.
Only python version 2.7 can coop with those higher versions of openSSL but this version is available just on SLES12.

Both transport protocols, TLS 1.2 and 1.1 are supported on SLES12.
Present GMS2.1 version is not supported for SLES12. There is coming GMS version 2.2 which would be able to run on SLES12, and therefore support also TLS 1.x.